This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json) Hash identifier: vRaXFs8qnb8fu4JbIA+LeINpO3jfG69aUlfwR0H4vT0= Subject key identifier: 77:E5:A1:80:9F:79:BA:7F:44:02:18:D5:67:90:64:63:B5:CB:4F:1C Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Certificate serial: 019AF49BE69D42015A54D403C5F5179DDED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft Manifest number: 152F Signing time: Sat 06 Dec 2025 17:00:49 +0000 Manifest this update: Sat 06 Dec 2025 17:00:49 +0000 Manifest next update: Sun 07 Dec 2025 17:00:49 +0000 Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=) 2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=) 3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: WcAMzitMEQAUbxbq+sfocNME2+2D/BM6hZG1X48weBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e6:9d:42:01:5a:54:d4:03:c5:f5:17:9d:de:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8 Validity Not Before: Dec 6 17:00:49 2025 GMT Not After : Dec 7 17:00:49 2025 GMT Subject: CN=77e5a1809f79ba7f440218d567906463b5cb4f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:d4:4c:71:da:14:e7:e6:1f:76:ee:d6:c8: 65:f0:ef:71:0f:e4:ba:84:ec:eb:8b:2a:03:f1:c6: 9f:69:61:2f:43:95:7a:93:e6:24:12:ac:8c:49:23: f4:64:2c:aa:6f:09:04:62:e5:31:eb:d5:15:dc:04: 9a:c5:97:08:e3:40:2e:3a:d7:a0:a3:e8:1e:9c:92: 96:ed:54:b2:4a:18:10:aa:d4:90:e9:37:ef:a4:df: 5b:2b:4f:b2:65:55:d2:95:8c:b2:f4:4e:df:7e:31: 7f:d9:b7:db:50:1d:1d:96:e3:9e:78:27:a7:6a:6d: 92:79:b9:b4:bb:be:b0:f0:00:26:b6:a7:a2:2a:5d: 50:43:d3:84:43:71:86:b1:c9:d8:1f:86:c4:59:90: a0:ef:bb:bb:64:cc:89:25:88:6e:6d:2b:97:ff:82: 20:b5:d2:00:ba:1d:f9:01:0c:03:43:32:08:09:6e: 69:d1:76:28:e4:0a:aa:58:4a:82:e6:b9:bf:b8:4a: c8:29:07:8f:44:cf:54:61:6f:da:78:a7:e7:d3:5e: 1f:c3:b0:7b:85:45:64:e5:56:e3:c8:b6:69:db:c3: a1:ed:e2:13:e2:1b:93:c4:40:64:6c:8d:21:03:1c: 2e:0f:f3:ad:51:c3:7d:49:e8:ec:83:06:0d:11:4b: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:A1:80:9F:79:BA:7F:44:02:18:D5:67:90:64:63:B5:CB:4F:1C X509v3 Authority Key Identifier: keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f7:4a:0c:b8:5c:aa:59:38:ae:9e:25:bc:9c:35:e6:2b:8f: 9a:cf:4f:6b:b5:d2:e1:2a:75:6b:b6:fe:b2:da:6c:e1:55:a5: 63:0b:d3:5d:c9:6c:ae:e8:50:b8:7b:b5:e6:a1:f6:70:ef:17: cf:f2:5a:f3:ad:31:e9:96:dd:f4:5a:96:b7:65:c1:4d:f5:b4: 2f:ee:a9:d6:11:57:d9:a0:59:ac:2b:3f:31:8a:82:32:e7:eb: 9b:3b:3d:4f:62:3c:1a:9e:2c:62:06:94:0c:48:b4:c7:09:fc: 42:8c:85:ee:e4:71:2e:a0:e1:fd:82:7f:91:62:e6:96:b6:0e: 25:ad:17:46:bf:51:4e:f8:c9:75:be:2d:f3:ff:c7:02:2a:a6: 44:5e:1e:cc:eb:5c:97:87:c0:7f:91:15:fe:01:27:8b:04:1e: fe:ed:f4:43:c9:bf:2b:c8:ae:41:c3:55:a0:5b:b8:8d:21:da: 35:d1:1b:35:e4:30:94:ab:13:ee:0c:c6:e3:74:ea:51:d2:9b: 01:82:27:34:ac:be:e2:8c:f9:85:c0:5d:7f:a1:ef:88:fc:61: 0c:50:90:48:50:2d:17:bd:63:ea:e1:4f:ff:b6:f8:03:d9:08: 17:83:fb:01:49:33:30:9c:dd:da:df:75:57:a4:5d:7e:fb:8a: 4b:5d:02:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+adQgFaVNQDxfUXnd7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0 ZjFmZjgwHhcNMjUxMjA2MTcwMDQ5WhcNMjUxMjA3MTcwMDQ5WjAzMTEwLwYDVQQD Eyg3N2U1YTE4MDlmNzliYTdmNDQwMjE4ZDU2NzkwNjQ2M2I1Y2I0ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y7UTHHaFOfmH3bu1shl8O9xD+S6 hOzriyoD8cafaWEvQ5V6k+YkEqyMSSP0ZCyqbwkEYuUx69UV3ASaxZcI40AuOteg o+genJKW7VSyShgQqtSQ6TfvpN9bK0+yZVXSlYyy9E7ffjF/2bfbUB0dluOeeCen am2Sebm0u76w8AAmtqeiKl1QQ9OEQ3GGscnYH4bEWZCg77u7ZMyJJYhubSuX/4Ig tdIAuh35AQwDQzIICW5p0XYo5AqqWEqC5rm/uErIKQePRM9UYW/aeKfn014fw7B7 hUVk5VbjyLZp28Oh7eIT4huTxEBkbI0hAxwuD/OtUcN9SejsgwYNEUsI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfloYCfebp/RAIY1WeQZGO1y08cMB8GA1UdIwQY MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPdKDLhc qlk4rp4lvJw15iuPms9Pa7XS4Sp1a7b+stps4VWlYwvTXclsruhQuHu15qH2cO8X z/Ja860x6Zbd9FqWt2XBTfW0L+6p1hFX2aBZrCs/MYqCMufrmzs9T2I8Gp4sYgaU DEi0xwn8QoyF7uRxLqDh/YJ/kWLmlrYOJa0XRr9RTvjJdb4t8//HAiqmRF4ezOtc l4fAf5EV/gEniwQe/u30Q8m/K8iuQcNVoFu4jSHaNdEbNeQwlKsT7gzG43TqUdKb AYInNKy+4oz5hcBdf6HviPxhDFCQSFAtF71j6uFP/7b4A9kIF4P7AUkzMJzd2t91 V6RdfvuKS10C5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:16 2025 by rpki-client